[muglo] Re: Download
- From: "Joe McGuire" <theguy@xxxxxxxxxxx>
- To: <muglo@xxxxxxxxxxxxx>
- Date: Tue, 19 Nov 2002 22:18:54 -0500
Klez is great for causing doubt. What it does is harvest the infected
machines address book for a list of people to send it to. It also picks
a name at random from that address book to use as the sender's email
address. So, while the message looks like it came from paul, it didn't.
But, as the person who IS infected had both MUGLO and Paul's email
addresses in their address book, there is a *very* good chance that the
person is a member of MUGLO.
http://www.ku.edu/~acs/virus/viruses/klez.shtml -- Pay special attention
to the first line in the main body of the write-up.
http://www.jmu.edu/computing/security/info/klez.shtml
And lastly, straight from NAI, the folks that make Mcafee AV software:
http://vil.nai.com/vil/content/v_99367.htm
Joe McGuire aka tinfoil
tinfoil.music
http://music.tinfoil.net
> -----Original Message-----
> From: muglo-bounce@xxxxxxxxxxxxx
> [mailto:muglo-bounce@xxxxxxxxxxxxx] On Behalf Of Mary
> Sent: Tuesday, November 19, 2002 7:37 PM
> To: muglo@xxxxxxxxxxxxx
> Subject: [muglo] Re: Download
>
>
>
> Hi Ken,
>
> Thanks for your reply.
>
> At 6:14 PM -0500 11/19/02, Ken wrote:
>
> >See my earlier email. My ISP apparently identified it as a virus.
>
> Yeah, I saw that. I'm not convinced, yet, and I'll tell ya why. I can
> find no info at the usual 'net virus sites to indicate that Klez
> either arrives or appears in the form that Paul's email had. That's
> grounds for doubt, isn't it?
>
> Be interesting to hear from Paul.
>
> Regards - Mary
>
>
> Users can subscribe to the List by sending an email to
> <muglo-request@xxxxxxxxxxxxx> with 'subscribe' in the Subject field
>
> Users can unsubscribe from the List by sending an email to
> <muglo-request@xxxxxxxxxxxxx> with 'unsubscribe' in the Subject field
>
> Users must send messages or replies to <muglo@xxxxxxxxxxxxx>
>
> All messages are archived so that you can view them at any time by
> going to <//www.freelists.org/archives/muglo>
>
> Problems concerning use of the FreeList should be sent to
> <paulthomas@xxxxxxx>
>
> Don't forget to periodically check our web site at:
>
http://muglo.on.ca/
Users can subscribe to the List by sending an email to
<muglo-request@xxxxxxxxxxxxx> with 'subscribe' in the Subject field
Users can unsubscribe from the List by sending an email to
<muglo-request@xxxxxxxxxxxxx> with 'unsubscribe' in the Subject field
Users must send messages or replies to <muglo@xxxxxxxxxxxxx>
All messages are archived so that you can view them at any time by
going to <//www.freelists.org/archives/muglo>
Problems concerning use of the FreeList should be sent to
<paulthomas@xxxxxxx>
Don't forget to periodically check our web site at:
http://muglo.on.ca/
Other related posts: